1694 matches found
EUVD-2025-30255
Malicious code in bioql PyPI...
EUVD-2023-1697
Malicious code in bioql PyPI...
EUVD-2023-50009
Malicious code in bioql PyPI...
EUVD-2025-25200
Malicious code in bioql PyPI...
EUVD-2024-2364
Malicious code in bioql PyPI...
EUVD-2024-45180
Malicious code in bioql PyPI...
EUVD-2022-34634
Malicious code in bioql PyPI...
EUVD-2021-31508
Malicious code in bioql PyPI...
EUVD-2022-5366
Malicious code in bioql PyPI...
EUVD-2022-5551
Malicious code in bioql PyPI...
EUVD-2025-31407
Malicious code in bioql PyPI...
EUVD-2024-47355
Malicious code in bioql PyPI...
The default configuration of NCSA Telnet package for Macintosh and PC enables FTP, even though it does not include an "ftp=yes" line, which allows remote attackers to read and modify arbitrary files.
...
argo-cd vulnerable unauthenticated DoS via malformed Gogs webhook payload
Summary Unpatched Argo CD versions are vulnerable to malicious API requests which can crash the API server and cause denial of service to legitimate clients. With the default configuration, no webhook.gogs.secret set, Argo CD’s /api/webhook endpoint will crash the entire argocd-server process whe...
Improper Check or Handling of Exceptional Conditions
Overview Affected versions of this package are vulnerable to Improper Check or Handling of Exceptional Conditions in the /api/webhook endpoint. An attacker can cause the server to crash and disrupt service availability by sending a Bitbucket Server Push event with JSON field repository.links.clon...
kernel: drm/vkms: Fix use after free and double free on init error
In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix use after free and double free on init error If the driver initialization fails, the vkmsexit function might access an uninitialized or freed defaultconfig pointer and it might double free it. Fix both possible erro...
CVE-2025-3193
The CVE-2025-3193 entry concerns algoliasearch-helper versions 2.0.0-rc1 through 3.11.2 (and earlier) with a Prototype Pollution in the _merge() function of merge.js. The underlying issue allows modification of constructor.prototype and, in an extreme edge-case where the resulting error is caught...
CVE-2025-52159
Hardcoded credentials in default configuration of PPress 0.0.9...
PPress 安全漏洞
PPress is a Python-based blogging CMS system by the individual developer yandaozi. A security vulnerability exists in PPress version 0.0.9, which stems from hard-coded credentials included in the default configuration...
